cole.eastside.k12.ca.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 98:0f:d6:27:57:e7:8a:48:13:56:83:dc:63:c7:0c:63 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cole.eastside.k12.ca.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 98:0f:d6:27:57:e7:8a:48:13:56:83:dc:63:c7:0c:63
Serial Number (int): 202124883364943865344508177221388012643
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7e:ee:b3:9f:e7:e3:64:2a:e7:8e:d3:16:b0:c0:84:d2:96:d2:a8:d3
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 00:9a:fd:16:ea:a3:4f:4c:b3:82:bd:43:4f:7e:71:5b:10:78:1e:30
Fingerprint (sha256): c2:09:a9:9e:dd:b3:e8:0a:c7:fe:22:de:96:6b:a9:dc:5e:31:ff:a0:53:27:b0:72:8b:eb:87:a7:92:46:3c:0d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/G-5zgrirggo
CRL Distribution Point: http://crls.pki.goog/gts1p5/rQZLuVzD8Fg.crl

Check the revocation status for certificate cole.eastside.k12.ca.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cole.eastside.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cole.eastside.k12.ca.us

Other certificates including the domain name eastside.k12.ca.us

(limited to 100 certificates)
webmail.eastside.k12.ca.us
admin.beafriar.com
webmail.eastside.k12.ca.us
access.eastside.k12.ca.us
admin.agbumds.org
admin.beafriar.com
admin.beafriar.com
admin.bhs.bcsdk12.org
admin.agbumds.org
admin.beafriar.com
admin.agu.ealas.org
admin.agu.ealas.org
ccess.eastside.k12.ca.us
admin.burtontechnology.org
cenu.edu.mx
admin.burtontechnology.org
webmail.eastside.k12.ca.us
admin.burtontechnology.org
preschool.stpaulsorange.org
admin.agu.ealas.org
admin.agu.ealas.org
webmail.eastside.k12.ca.us
www.canyonhighcowboys.org
admin.keillerleaders.org
*.eastside.k12.ca.us
admin.beafriar.com
admin.burtontechnology.org
rembrandt-elementary.vanguardacademy.education
www.gvipreschools.org
admin.aes.pgsd.ms
admin.cole.eastsideusd.org
admin.beafriar.com
blandford.rowlandschools.org
access.eastside.k12.ca.us
admin.agu.ealas.org
admin.beafriar.com
admin.beafriar.com
admin.enterprise.eastsideusd.org
webmail.eastside.k12.ca.us
tierrabonita.eastside.k12.ca.us
admin.aes.pgsd.ms
admin.burtontechnology.org
admin.rsu14.org
wbms.bibbed.org
columbia.eastside.k12.ca.us
admin.beafriar.com
webmail.eastside.k12.ca.us
columbia.eastside.k12.ca.us
admin.rowlandschools.org
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.rowlandschools.org
admin.burtontechnology.org
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.aes.pgsd.ms
admin.agu.ealas.org
admin.wms.csisd.org
cole.eastside.k12.ca.us
alvarado.rowlandschools.org
admin.agu.ealas.org
admin.aes.pgsd.ms
admin.agu.ealas.org
aes.pgsd.ms
admin.beafriar.com
web.upedregal.edu.mx
eastsideelementary.eastside.k12.ca.us
webmail.eastside.k12.ca.us
admin.corey.bpsd.k12.ca.us
admin.aes.pgsd.ms
admin.aes.pgsd.ms
cole.eastside.k12.ca.us
admin.aes.pgsd.ms
admin.agbumds.org
church.stpaulsorange.org
admin.northside.wisd.org
admin.agu.ealas.org
cole.eastside.k12.ca.us
admin.bhs.bcsdk12.org
admin.beafriar.com
webmail.eastside.k12.ca.us
admin.agu.ealas.org
admin.agu.ealas.org
bgh4.org
admin.burtontechnology.org
webmail.eastside.k12.ca.us
admin.ovhs.info
admin.beafriar.com
admin.burtontechnology.org
admin.burtontechnology.org
ovhs.info
admin.beafriar.com
www.enterprise.eastside.k12.ca.us
southprimary.kiskiarea.com
admin.agbumds.org
www.ranchoalamitoshs.com

Certificate

The complete raw certificate details for cole.eastside.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw534nOAa8hxKVi/WtJf
l9WP/USA0/14/SXPcBjiFiQiCAfqi/DMZiadhuvgKTKm6A8ie1JcalSAl75v3XEM
4TpbJN4aOBZc6IqwpDD0duSY1NOWad5ljPb0m6PTvOcJqILUKtF7auy7nHwQOQcH
Fdev8CCC2moIfJrtgyKTPkaNhJd9JIQKddPQWM3K/fLXhfU19Z+cVSK/vKsLKijs
DZr7FP9ojDzXnwFFTO1N8azqTedFtmfHlzT1B4XPR0CPHsySoTdOq6P2U/p7ax9x
SUrmJQA9TvWH5vSEvOHruuflVlMm3s+HjHOTlG7+ailUayi5rfQHEpfm/Q/wmSun
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 202124883364943865344508177221388012643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 15:28:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 15:28:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cole.eastside.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22603791173130536315858265469730629235907988510802591851615752268195958052716858058691418420837505738460171287016040590615411085064198432995375939339222669432318047265550923280525504401397966450047894186559194810500332344495938813693045754365069055825490229076394937486214969542665745330492537793010955999328232312198012373184143819787221266245192375514376426451570065331315924099035040617487231165076149674044711047282775201623768714640002476224427099324995190091942859332111301393103311003298925876862928410492875633929017058988035441578627821730239728576256426409415985750765853364983717200736953092317775546525609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eeeb39fe7e3642ae78ed316b0c084d296d2a8d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/G-5zgrirggo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cole.eastside.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/rQZLuVzD8Fg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bfd02d1b5000004030048304602210085ed4834af7f33d4a75e0a6743ee01b4f3247ae4db18d46c0d421d7667c48ecb022100fd0dbbabf4170bb55cdedf53a7ce3323ef847aa440df7efb58e2f9edf1c04999007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bfd02d188000004030047304502202475007b6c475a3b17ad4311ac1bcb6ebb1dda8eac122a5f5f60fdc76e75de65022100cd2c9ef65f2d98ecd43e25cfb3e6705deb4be24a0ac4b666361e8cd484a1a085
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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